Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
File:                     L46D7v5_FLnkSQo27r2IHhY8zBs.mft (raw, json)
Hash identifier:          JZ/W1+PMcZsRWHjL/O51xq/asjGOrnGdV78sbXj8i2E=
Subject key identifier:   97:F2:98:23:A8:6D:28:54:DB:18:C8:E8:C9:26:98:CF:D9:BC:7F:8A
Authority key identifier: 2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B
Certificate issuer:       /CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
Certificate serial:       01962F06B10786E14F52CD18E078D5128E82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft
Manifest number:          1230
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: L46D7v5_FLnkSQo27r2IHhY8zBs.crl (hash: MKv3GAcw95Bb3vv27cCv/DpHNyRwdb3cQa4Jf7p/HtY=)
                          2: ou7kmfNJPTUTO_ZY5p4au0cZuog.roa (hash: 10vYhF0nx+k3pDi2pZX1tYjYlLEGelMx798hFv/wUiM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b1:07:86:e1:4f:52:cd:18:e0:78:d5:12:8e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8e83eefe7f14b9e4490a36eebd881e163ccc1b
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=97f29823a86d2854db18c8e8c92698cfd9bc7f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:b2:a6:87:69:1a:bf:26:a1:e0:3f:27:09:
                    6f:98:5b:c8:ac:bf:5a:fc:42:12:ec:0e:9f:cf:ff:
                    1f:6c:16:3e:8c:14:b5:59:cd:b0:8a:9e:c9:0a:44:
                    66:10:a9:ed:8f:89:4a:3e:5a:a0:77:a9:93:4d:94:
                    9f:3a:f9:7c:ea:f3:c8:a1:24:1d:22:9b:4d:3e:6b:
                    26:0e:a6:08:70:90:c0:25:48:4c:3e:da:96:8d:31:
                    ae:e9:ce:43:af:0b:73:fb:a4:0a:f0:99:fb:be:ec:
                    9f:1b:15:32:03:7a:23:67:4d:a4:55:64:ee:15:14:
                    b9:9a:b2:4d:a0:a9:cc:2a:e9:fb:6b:5f:55:1e:5a:
                    8b:d6:de:2d:49:ee:65:5a:92:ba:71:75:f9:1b:1c:
                    eb:37:8c:ff:9f:49:8c:20:17:99:db:a9:9e:d2:4c:
                    43:1e:96:c6:5b:16:26:56:b3:89:c2:a1:f5:c6:be:
                    25:5e:82:58:7a:a9:d2:c3:92:79:64:81:19:c0:33:
                    f0:25:39:4d:e0:03:6e:af:45:cf:61:36:c2:1f:40:
                    0e:7f:c1:ca:fe:6b:b9:56:6c:aa:0a:de:44:68:ef:
                    2f:67:ca:e6:16:be:48:2e:3e:ab:1e:19:d0:df:b7:
                    c9:ac:9a:98:4b:ca:96:f3:21:cd:b7:30:c2:ed:76:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F2:98:23:A8:6D:28:54:DB:18:C8:E8:C9:26:98:CF:D9:BC:7F:8A
            X509v3 Authority Key Identifier:
                keyid:2F:8E:83:EE:FE:7F:14:B9:E4:49:0A:36:EE:BD:88:1E:16:3C:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L46D7v5_FLnkSQo27r2IHhY8zBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb26f7-1303-4210-a9d8-1eb3b8a941f7/1/L46D7v5_FLnkSQo27r2IHhY8zBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7a:fc:a6:d9:bb:52:8a:52:dd:55:a2:b9:e1:f7:dc:e9:04:
         96:01:aa:1a:c9:5f:2f:e3:d6:1e:d2:68:cd:9a:4f:a9:7d:27:
         f8:2e:80:0a:d4:43:40:d3:b4:85:f1:98:16:8e:a6:14:4d:c1:
         48:29:04:bc:fa:e2:a3:20:4b:e5:71:b2:bd:bb:83:4d:95:20:
         f6:0a:44:e0:d4:8b:f6:eb:eb:12:e6:8a:85:62:7f:27:40:e1:
         16:3e:9f:b4:67:da:1f:c2:d6:08:33:29:3a:e3:c6:ae:d7:9a:
         42:4a:d3:1b:e7:98:97:ad:55:61:ec:bd:01:75:b6:6e:a4:8b:
         76:00:13:9c:5e:59:9c:0f:1c:2f:02:7c:95:48:8a:c3:5a:9a:
         15:ee:a1:8f:f3:c9:6f:9c:2f:f8:c7:79:cb:3f:ff:31:4d:14:
         91:a4:30:65:48:15:fa:00:2c:fc:83:e4:8b:2b:29:f5:4b:cb:
         2c:d6:ec:63:62:ac:2f:de:9e:1a:78:d1:52:8b:90:45:86:c0:
         d7:04:6b:19:47:f5:a1:35:08:f2:16:fc:09:4c:d9:92:1d:b5:
         c6:d8:25:2a:3f:61:fc:da:6c:18:dd:a8:d3:1f:90:2a:e8:30:
         ef:3e:5e:50:8d:62:7e:5f:b0:3a:f9:33:68:28:3d:03:74:b3:
         e3:4b:51:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBrEHhuFPUs0Y4HjVEo6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOGU4M2VlZmU3ZjE0YjllNDQ5MGEzNmVlYmQ4ODFlMTYz
Y2NjMWIwHhcNMjUwNDEzMTIwMTI5WhcNMjUwNDE0MTIwMTI5WjAzMTEwLwYDVQQD
Eyg5N2YyOTgyM2E4NmQyODU0ZGIxOGM4ZThjOTI2OThjZmQ5YmM3ZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLKypodpGr8moeA/JwlvmFvIrL9a
/EIS7A6fz/8fbBY+jBS1Wc2wip7JCkRmEKntj4lKPlqgd6mTTZSfOvl86vPIoSQd
IptNPmsmDqYIcJDAJUhMPtqWjTGu6c5Drwtz+6QK8Jn7vuyfGxUyA3ojZ02kVWTu
FRS5mrJNoKnMKun7a19VHlqL1t4tSe5lWpK6cXX5GxzrN4z/n0mMIBeZ26me0kxD
HpbGWxYmVrOJwqH1xr4lXoJYeqnSw5J5ZIEZwDPwJTlN4ANur0XPYTbCH0AOf8HK
/mu5VmyqCt5EaO8vZ8rmFr5ILj6rHhnQ37fJrJqYS8qW8yHNtzDC7Xb/SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfymCOobShU2xjI6MkmmM/ZvH+KMB8GA1UdIwQY
MBaAFC+Og+7+fxS55EkKNu69iB4WPMwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDQ2RDd2NV9GTG5rU1FvMjdyMklIaFk4ekJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lYjI2ZjctMTMwMy00MjEwLWE5ZDgt
MWViM2I4YTk0MWY3LzEvTDQ2RDd2NV9GTG5rU1FvMjdyMklIaFk4ekJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lYjI2ZjctMTMwMy00MjEwLWE5ZDgtMWViM2I4YTk0MWY3
LzEvTDQ2RDd2NV9GTG5rU1FvMjdyMklIaFk4ekJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnr8ptm7
UopS3VWiueH33OkElgGqGslfL+PWHtJozZpPqX0n+C6ACtRDQNO0hfGYFo6mFE3B
SCkEvPrioyBL5XGyvbuDTZUg9gpE4NSL9uvrEuaKhWJ/J0DhFj6ftGfaH8LWCDMp
OuPGrteaQkrTG+eYl61VYey9AXW2bqSLdgATnF5ZnA8cLwJ8lUiKw1qaFe6hj/PJ
b5wv+Md5yz//MU0UkaQwZUgV+gAs/IPkiysp9UvLLNbsY2KsL96eGnjRUouQRYbA
1wRrGUf1oTUI8hb8CUzZkh21xtglKj9h/NpsGN2o0x+QKugw7z5eUI1ifl+wOvkz
aCg9A3Sz40tRPQ==
-----END CERTIFICATE-----